This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft
File:                     BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft (raw, json)
Hash identifier:          lnR6BlA4PuzHx4UUtFh9VT/ech4kwLlFek6qEzWFaq8=
Subject key identifier:   E0:7D:5C:C7:49:A6:0E:AB:27:12:12:31:CF:1A:FB:E2:83:6C:DE:43
Authority key identifier: BD:5D:46:B5:BF:E7:2F:2A:A1:18:8A:90:96:B1:0E:01:47:42:44:B1
Certificate issuer:       /CN=BD5D46B5BFE72F2AA1188A9096B10E01474244B1
Certificate serial:       65BC5A72823268C41657EA509BE969CF71F866ED
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft
Manifest number:          0294
Signing time:             Sat 31 Jan 2026 01:51:36 +0000
Manifest this update:     Sat 31 Jan 2026 01:46:36 +0000
Manifest next update:     Tue 03 Feb 2026 12:48:36 +0000
Files and hashes:         1: 3130332e3130352e3139352e302f32342d3234203d3e20313336383738.roa (hash: O8lklXAV7vvG+v+hANkUO5KIwzG98mC/eIBJJgrAC6Y=)
                          2: 3130332e3130352e3139332e302f32342d3234203d3e20313337333136.roa (hash: TXKlB2hfqxWA+jXF08t3ciFtbxDo9W/xPDl1rsz8aDE=)
                          3: 3130332e3130352e3139342e302f32342d3234203d3e20313336383738.roa (hash: sGPkr82UUN2m0p5Z6EeIkVlWIj/RwlmetOwmRgGSsB8=)
                          4: 3130332e3130352e3139322e302f32342d3234203d3e20313336383738.roa (hash: w0xMtSXTcSCSqsp69YKeThLLGPMrf9e1AjwvZ9mn/V0=)
                          5: BD5D46B5BFE72F2AA1188A9096B10E01474244B1.crl (hash: Yi9myz5ANnPtUz1sJouzzFV7dKwtUaGfGQfX+7uRScA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.crl
                          rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 12:48:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:bc:5a:72:82:32:68:c4:16:57:ea:50:9b:e9:69:cf:71:f8:66:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD5D46B5BFE72F2AA1188A9096B10E01474244B1
        Validity
            Not Before: Jan 31 01:46:36 2026 GMT
            Not After : Feb  3 12:48:36 2026 GMT
        Subject: CN=E07D5CC749A60EAB27121231CF1AFBE2836CDE43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:2c:eb:58:59:3c:15:fd:56:a8:51:09:1b:ad:
                    0d:05:d6:3a:06:78:71:8d:d8:b1:5c:f3:ed:1b:36:
                    97:7c:19:d8:4d:a5:d9:e7:a3:3d:10:43:26:35:99:
                    de:36:1c:a6:4e:be:91:e1:1e:2e:24:82:05:03:62:
                    55:11:fe:0f:49:ad:bb:d6:47:12:b4:44:24:07:40:
                    76:ac:df:07:31:a6:98:1f:a0:50:dd:34:ab:0a:58:
                    9f:7b:06:25:23:96:e3:87:1e:b8:0b:58:4b:a4:79:
                    1a:ba:d5:5b:f4:0c:2d:e1:7a:df:2c:cd:56:dd:81:
                    c1:f6:6a:53:24:bf:ca:c2:ba:77:ff:40:ea:bc:8d:
                    71:25:4b:05:07:7b:c9:7a:62:69:1c:42:1e:ad:30:
                    45:d5:be:a7:e0:d0:43:80:55:d7:24:ce:ca:14:be:
                    ee:27:8d:5f:f6:b6:f4:13:7a:ea:97:58:f8:2a:7e:
                    e9:17:d0:f8:d2:da:d7:da:09:07:14:80:cd:d0:01:
                    33:f7:78:8e:a9:38:b6:b2:e1:ce:a1:b2:9a:97:c2:
                    d2:64:00:0b:08:9a:a0:3e:bb:74:16:34:cb:96:d2:
                    05:5e:60:fe:86:a6:f2:ca:6e:aa:91:13:53:ce:b1:
                    0c:cc:4f:54:27:92:02:e5:ce:cf:a3:67:46:d3:f7:
                    00:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:7D:5C:C7:49:A6:0E:AB:27:12:12:31:CF:1A:FB:E2:83:6C:DE:43
            X509v3 Authority Key Identifier:
                keyid:BD:5D:46:B5:BF:E7:2F:2A:A1:18:8A:90:96:B1:0E:01:47:42:44:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:80:09:26:93:67:12:d1:a8:db:3e:37:ce:c9:68:6e:b3:75:
         84:6c:82:09:a9:63:94:7d:01:1f:43:f2:b8:ea:b5:fb:d3:80:
         f0:cd:b1:2d:c1:87:5f:96:10:9f:eb:4f:ca:b7:11:11:f7:81:
         08:3a:9b:06:31:8d:95:bc:0b:a0:52:0f:e9:61:27:e3:a9:0c:
         90:4f:76:90:79:50:ee:62:e7:a8:2e:66:c5:c1:56:81:2b:94:
         55:fb:fc:af:31:72:72:d8:c6:3d:0b:67:2c:a7:93:07:36:84:
         71:ae:b1:10:aa:2e:3c:bb:8d:8b:bf:d1:47:fc:07:1a:cf:68:
         3c:fd:41:11:b7:cf:cd:8e:fb:2a:89:d6:46:17:d9:7e:68:d7:
         4d:75:37:9c:79:2d:33:0e:1c:06:72:4c:97:0b:48:95:1c:83:
         d8:07:f8:6b:71:1e:b4:bd:7b:ad:32:c7:ed:6b:3b:75:ba:7c:
         d3:21:cd:37:50:d7:b8:90:85:b3:a7:fa:cd:1d:30:61:95:cb:
         12:20:6e:07:f9:db:35:05:59:07:01:eb:fc:46:0d:7c:7d:95:
         43:5e:8a:96:b3:a5:4d:65:9b:cc:e9:fe:d5:3f:44:58:5c:69:
         cc:8b:22:24:fc:af:fa:d0:39:ff:1d:5e:e6:0a:9d:d5:88:0c:
         46:f3:42:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:50:43 2026 by rpki-client